Putting your security first, StoreConnect achieves PCI DSS compliance
It is a reality of modern business that security is a top-of-mind concern. We see the headlines about data breaches every week, and we know our customers have to be more vigilant than ever about the platforms they choose to trust. We want StoreConnect to be the platform you never have to worry about.
We are excited to share that StoreConnect has officially achieved Payment Card Industry Data Security Standard (PCI DSS) compliance.
While StoreConnect does not directly store, process, or transmit payment card information, we have taken a proactive approach to security by achieving PCI DSS compliance. As an e-commerce platform that integrates with our clients’ PCI-compliant payment providers, we recognize the importance of ensuring strong security coverage across the entire transaction ecosystem. This additional step provides further assurance to our clients and their customers that every layer of the commerce experience is built with security and trust in mind.
This represents a significant milestone for our platform. While we have always relied on the world-class security foundation provided by Salesforce, undergoing this rigorous assessment was a deliberate step to ensure that we are doing everything possible to keep your customer and payment data safe.
A proactive approach to security
In a digital world where threats evolve daily, compliance is not just a badge to display; it is a vital layer of protection for your business.
We know that as you grow, you need to feel confident that your infrastructure is built to withstand scrutiny. This PCI DSS validation means that our environment has been tested, audited, and verified by a Qualified Security Assessor to meet the industry’s most demanding requirements for handling cardholder data and reducing fraud risk.
Our commitment to your peace of mind
Security has always been central to our architecture, but we have been working hard to formalize these commitments as we scale. PCI DSS compliance now sits alongside our existing security certifications, including GDPR, HIPAA, SOC 2 and ISO 27001:2022.
We believe in radical transparency when it comes to how we handle your data. You can find detailed information on these standards and our ongoing security practices at our Trust Center. We are not just building tools for commerce; we are building a safe home for your business operations.
How to access our compliance documentation
If you are a partner or customer who needs specific documentation for your own internal security audits, we are ready to assist. We have our Attestation of Compliance (AOC) available to share, which serves as our signed proof of compliance. We also have our detailed Report on Compliance (ROC) available for review under a non-disclosure agreement.
Security should give you the confidence to innovate, not the fear of moving forward. We have done the heavy lifting to ensure our platform is ready for the challenges of today and tomorrow, so you can keep focusing on what you do best, serving your customers and growing your brand.
If you have any questions about our security practices or need access to our compliance documentation, please reach out. We are happy to help.